Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 20 updates - #4263

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-6ee950c6e8
Open

build(deps): bump the minor-and-patch group across 1 directory with 20 updates#4263
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-6ee950c6e8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 20 updates in the / directory:

Package From To
@ai-sdk/provider-utils 5.0.28 5.0.32
@astryxdesign/cli 0.4.5 0.5.0
@biomejs/biome 2.5.9 2.5.10
@types/node 26.2.0 26.4.0
knip 6.32.2 6.32.3
intl-messageformat 11.2.12 11.2.14
@ai-sdk/anthropic 4.0.40 4.0.44
@ai-sdk/code-mode 1.0.27 1.0.40
@ai-sdk/cohere 4.0.28 4.0.33
@ai-sdk/google 4.0.47 4.0.55
@ai-sdk/openai 4.0.44 4.0.50
@ai-sdk/openai-compatible 3.0.32 3.0.39
@slack/web-api 8.0.0 8.1.0
ai 7.0.70 7.0.83
@earendil-works/pi-tui 0.84.2 0.84.3
katex 0.16.47 0.18.4
lucide-react 1.33.0 1.34.0
mermaid 11.17.0 11.17.2
@types/react-dom 19.2.4 19.2.5
@jackwener/opencli 1.8.6 1.8.7

Updates @ai-sdk/provider-utils from 5.0.28 to 5.0.32

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

5.0.32

Patch Changes

  • 3e125ba: Allow manual tool approval statuses to include a reason and preserve it across core, model, and UI approval requests. OPA requires-approval decisions now surface their reason to human approvers. UI request chunks serialize the optional reason, while UI messages retain it as approval.requestReason separately from an approver's response reason.

5.0.31

Patch Changes

  • a9782e1: fix: align batch result parsing, request counts, and lifecycle behavior across providers
  • 35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata
  • d2f3353: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.

5.0.30

Patch Changes

  • Updated dependencies [591d25b]
    • @​ai-sdk/provider@​4.0.8

5.0.29

Patch Changes

  • b74971f: Preserve schema-valued additional properties when converting Zod 4 schemas.
Commits
  • c93fa8d Version Packages (#19748)
  • 3e125ba fix: human tool approval requests omit policy reasons (#19658)
  • a01c481 Version Packages (#19478)
  • 35841f5 feat: normalize mid-stream provider error events into public typed errors wit...
  • d2f3353 fix: split large embedding batches that exceed provider aggregate token limit...
  • a9782e1 fix(batch): align result parsing, request counts, and behavior across provide...
  • 3d3afac Version Packages (#19362)
  • ed857f5 Version Packages (#19296)
  • b74971f fix: Zod 4 record and catchall value schemas being erased during JSON Schema ...
  • See full diff in compare view

Updates @astryxdesign/cli from 0.4.5 to 0.5.0

Release notes

Sourced from @​astryxdesign/cli's releases.

v0.5.0

Astryx 0.5.0 — all @astryxdesign/* packages ship at this version.

npx astryx upgrade --apply

@​astryxdesign/core

Breaking Changes

  • Banner: the collapse axis moves onto one collapsible prop, and content can opt out of collapsing (#5255) Banner inferred its disclosure from its content: any children got a chevron in the header and were hidden until it was pressed. There was no way to show content without a toggle — the case a banner most often wants, a list of the three fields that failed validation — and defaultIsExpanded was the only knob, with no controlled mode.

    The whole axis is now one boolean | CollapsibleConfig prop, following the boolean-or-config convention SideNav.collapsible set, and backed by the shared useCollapsible hook rather than Banner's own state:

    <Banner status="error" title="3 fields need attention"></Banner>  // unchanged: collapsible, starts closed
    <Banner collapsible={false}></Banner>                             // new: always visible, no toggle
    <Banner collapsible={{defaultIsOpen: true}}></Banner>             // replaces defaultIsExpanded
    <Banner collapsible={{isOpen, onOpenChange}}></Banner>            // new: controlled

    The default is unchanged — a banner that never mentioned defaultIsExpanded behaves exactly as it did. The breaking part is the prop itself: defaultIsExpanded is removed in favour of the config, which is a type error at every JSX call site that names it.

    Codemod: npx astryx upgrade --codemod banner-collapsible-content

    It rewrites defaultIsExpanded to collapsible={{defaultIsOpen: true}} and drops defaultIsExpanded={false}, which is now the default. Banners that never set the prop are left alone.

    One case the codemod and the compiler both miss: a spread. defaultIsExpanded inside a props object is out of the transform's scope. A props object in a typed position still fails to compile — but an inferred one that is spread, <Banner {...args} />, does not, because TypeScript does not excess-property-check a spread. The prop then falls through to the DOM and the banner quietly starts collapsed. Grep for defaultIsExpanded after running the codemod and migrate any spread sites by hand.

  • Overlays share one dismissal stack, so a single Escape dismisses exactly one layer. Every overlay used to own its own Escape listener, which meant one press could close a popover and the Dialog hosting it, or a modal and the modal it was opened from. useLayerDismissal replaces that with a single stack: the stack owns one listener, routes each press to the top-most layer, and suppresses the browser's own close-watcher so nothing dismisses twice. A layer declares what it does with a press via escapeBehaviorclose (default) or block, for a required Dialog that must swallow the press without closing so nothing behind it dismisses either. Fixes a Tooltip inside a Dialog closing the Dialog rather than the tip, and a HoverCard trigger swallowing Escape whenever it merely had focus. Dismissals the browser starts on its own — the Android back gesture, the platform close watcher — still close a Dialog, and follow the same top-most rule. An Escape that cancels an in-progress IME composition dismisses nothing: the stack claims that press so the browser raises no close request of its own, and a close request that arrives mid-composition anyway is declined, so a CJK user backing out of a half-formed character no longer loses the layer and everything typed into it. One behavior change worth knowing about if you listen for Escape yourself: the stack claims a press with preventDefault() but deliberately leaves propagation alone, so a keydown listener on window now sees an Escape that a focus-trapped layer used to stop — with defaultPrevented already true, which is how to tell the stack has acted on it. Top-most is resolved from React-tree nesting (which survives portals) rather than DOM containment alone. A layer's place in that order is keyed to the layer's identity rather than to each registration, so a prop change that re-registers it — a Dialog whose purpose flips while it is open — never promotes it above the layers opened over it. Controlled layers follow their control state: a controlled Tooltip or HoverCard stays on the stack and takes the press like any other layer, but answers it by calling onOpenChange(false) rather than hiding itself — whether it actually closes is the caller's update to make, exactly as it has always been for Dialog (#4881).

New Components

  • Allow MultiSelector count labels to be customized (#4032)

  • MultiSelector: rename the unreleased formatTriggerCount prop to formatValue and widen it to the whole trigger line. It now receives the selected items ({value, label}[], count available as .length) and formats the trigger for triggerDisplay="count" and "labels"; "badges" renders elements, so it is not used there. formatValue matches NumberInput and Slider, so the same idea has one name across the system. Defaults are unchanged when the prop is absent (#5377).

  • Promote Stepper and Step from the canary-only Lab package to Core. The stable package now ships their existing horizontal/vertical layouts, separated and on-track indicators, semantic status, density, and non-linear navigation, plus Core documentation and rendered examples. The default aria-label is now localized. Advancing one step now animates the connector. Every connector the four layouts draw — the separated bars and the on-track segments alike — grows its accent fill out of the segment's leading edge instead of swapping a background color, so moving forward reads as progress travelling the track. That one gesture is the only thing that animates: going back, jumping forward by more than one step, and mounting mid-flow all apply at once, as does any change under prefers-reduced-motion. Retreats are deliberately instant — run in reverse the same transition ends on a shrinking stub of accent, and a remnant still on the track reads as unfinished where the identical curve growing forward reads as arrived — and multi-step jumps are instant because a jump is a navigation rather than a progression, so sweeping a front across the crossed segments only makes the user sit out a journey they asked to skip. Where one span is drawn by several segments (the on-track layouts split a span between two steps, three when a content slot sits between them) the segments take abutting slices of the span's time and run linearly, so the fill reads as one line growing at a constant speed rather than pieces lighting in turn.

    Five visual fixes land with the promotion. Horizontal steps now divide the track evenly instead of sizing to their own labels, so every progress segment is the same width regardless of how long a step is named. Number indicators shrink from 20px to 16px to match the check, ring, and custom-icon indicators, so a step swapping its number for a check as it completes no longer nudges the label beside it. A step description now occupies a 16px box rather than a 24px one — it previously inherited the page's line box instead of applying its own leading, which opened an 8px gap under the label. A step's content slot now starts flush with the label above it at every density: the slot renders outside the density-padded label area, so it was hanging one pad short of it. And a vertical on-track step carrying content keeps its connector unbroken — the content renders below the row that draws the line, so the track used to split open around any step with content (#5201).

New Features

  • AspectRatio: emit ratio as a class-level declaration instead of a hard inline style, so the ratio can be overridden responsively: StyleX consumers pass an aspect-ratio rule via xstyle (including under @media/@container conditions), and plain-CSS/Tailwind consumers override aspect-ratio from their own unlayered rules, which beat the astryx-base cascade layer regardless of specificity. The mixed-gallery template's hero now switches 3:1 to 3:2 when the grid stacks with a one-line override on a single element, replacing the duplicated hero markup the fixed inline ratio previously forced (#3883, closes #2798)
  • ChatMessageList: add an align prop for top-aligned message lists (#3933, closes #2572).
  • DateTimeInput: new timeOptionInterval prop adds a dropdown of preset times to the time field, at a cadence of 5 | 10 | 15 | 30 | 60 minutes (60 gives the 12 AM - 11 PM list). The field becomes an APG combobox over a listbox: click or Alt+ArrowDown opens it, ArrowUp/ArrowDown move the active option, Enter picks, Escape closes, and typing moves the highlight to the closest option without filtering the list. min/max trim the options on the boundary date. Style the popup through the date-time-input-time-listbox and date-time-input-time-option theme targets. Opt-in and additive: with timeOptionInterval omitted the time field keeps exactly its current behavior and gains no combobox semantics, so existing getByRole('combobox') queries still resolve to the date input. With the list closed the arrow keys keep stepping by timeIncrement (#4837).
  • Markdown: opt-in source ranges on parsed blocks

... (truncated)

Changelog

Sourced from @​astryxdesign/cli's changelog.

0.5.0

Breaking Changes

  • Banner: the collapse axis moves onto one collapsible prop, and content can opt out of collapsing (#5255) Banner inferred its disclosure from its content: any children got a chevron in the header and were hidden until it was pressed. There was no way to show content without a toggle — the case a banner most often wants, a list of the three fields that failed validation — and defaultIsExpanded was the only knob, with no controlled mode.

    The whole axis is now one boolean | CollapsibleConfig prop, following the boolean-or-config convention SideNav.collapsible set, and backed by the shared useCollapsible hook rather than Banner's own state:

    <Banner status="error" title="3 fields need attention"></Banner>  // unchanged: collapsible, starts closed
    <Banner collapsible={false}></Banner>                             // new: always visible, no toggle
    <Banner collapsible={{defaultIsOpen: true}}></Banner>             // replaces defaultIsExpanded
    <Banner collapsible={{isOpen, onOpenChange}}></Banner>            // new: controlled

    The default is unchanged — a banner that never mentioned defaultIsExpanded behaves exactly as it did. The breaking part is the prop itself: defaultIsExpanded is removed in favour of the config, which is a type error at every JSX call site that names it.

    Codemod: npx astryx upgrade --codemod banner-collapsible-content

    It rewrites defaultIsExpanded to collapsible={{defaultIsOpen: true}} and drops defaultIsExpanded={false}, which is now the default. Banners that never set the prop are left alone.

    One case the codemod and the compiler both miss: a spread. defaultIsExpanded inside a props object is out of the transform's scope. A props object in a typed position still fails to compile — but an inferred one that is spread, <Banner {...args} />, does not, because TypeScript does not excess-property-check a spread. The prop then falls through to the DOM and the banner quietly starts collapsed. Grep for defaultIsExpanded after running the codemod and migrate any spread sites by hand.

New Components

  • Promote Stepper and Step from the canary-only Lab package to Core. The stable package now ships their existing horizontal/vertical layouts, separated and on-track indicators, semantic status, density, and non-linear navigation, plus Core documentation and rendered examples. The default aria-label is now localized. Advancing one step now animates the connector. Every connector the four layouts draw — the separated bars and the on-track segments alike — grows its accent fill out of the segment's leading edge instead of swapping a background color, so moving forward reads as progress travelling the track. That one gesture is the only thing that animates: going back, jumping forward by more than one step, and mounting mid-flow all apply at once, as does any change under prefers-reduced-motion. Retreats are deliberately instant — run in reverse the same transition ends on a shrinking stub of accent, and a remnant still on the track reads as unfinished where the identical curve growing forward reads as arrived — and multi-step jumps are instant because a jump is a navigation rather than a progression, so sweeping a front across the crossed segments only makes the user sit out a journey they asked to skip. Where one span is drawn by several segments (the on-track layouts split a span between two steps, three when a content slot sits between them) the segments take abutting slices of the span's time and run linearly, so the fill reads as one line growing at a constant speed rather than pieces lighting in turn.

    Five visual fixes land with the promotion. Horizontal steps now divide the track evenly instead of sizing to their own labels, so every progress segment is the same width regardless of how long a step is named. Number indicators shrink from 20px to 16px to match the check, ring, and custom-icon indicators, so a step swapping its number for a check as it completes no longer nudges the label beside it. A step description now occupies a 16px box rather than a 24px one — it previously inherited the page's line box instead of applying its own leading, which opened an 8px gap under the label. A step's content slot now starts flush with the label above it at every density: the slot renders outside the density-padded label area, so it was hanging one pad short of it. And a vertical on-track step carrying content keeps its connector unbroken — the content renders below the row that draws the line, so the track used to split open around any step with content (#5201).

New Features

  • AspectRatio: emit ratio as a class-level declaration instead of a hard inline style, so the ratio can be overridden responsively: StyleX consumers pass an aspect-ratio rule via xstyle (including under @media/@container conditions), and plain-CSS/Tailwind consumers override aspect-ratio from their own unlayered rules, which beat the astryx-base cascade layer regardless of specificity. The mixed-gallery template's hero now switches 3:1 to 3:2 when the grid stacks with a one-line override on a single element, replacing the duplicated hero markup the fixed inline ratio previously forced (#3883, closes #2798)
  • CLI: astryx theme targets lists every component theming target — the defineTheme key, the class it paints, and the props and states it accepts — for one component or the whole system, with --json for lint and audit scripts. astryx theme --help now points at component overrides instead of reading as a build-tool menu. The listing and theme build's override validation share one enumeration of the component docs, so neither can drift from the components (#5115).

Fixes

  • neutral theme: darken the light-mode error red from #e33f4a to #c9303a so the filled Badge variant="error" label clears WCAG 2.1 AA. White on #e33f4a is 4.14:1 and the badge label is 12px/weight 500, so the 4.5:1 normal-text threshold applies rather than the 3:1 large-text allowance; #c9303a gives 5.29:1 while holding the hue (OKLCH H 21.9 -> 22.8, C 0.200 -> 0.189). StatusDot and the ProgressBar --color-error rebinding move with it — both are documented as tracking the badge fill so the dot and its badge read as one status language. Dark mode is untouched (dark text on #ff705d, 6.60:1). Adds scripts/check-badge-contrast.test.mjs, which resolves every theme's badge label/fill pair through light-dark(), var() indirection and alpha compositing, and holds all of them to 4.5:1 (#4446).

  • Unified search and build now include components contributed by integrations, so a component registered through an integration is findable and buildable alongside the built-in set instead of silently missing from both (#5259).

  • Table - Grouped page template: wrap the rows in TableBody The template rendered <TableRow> straight into <Table>, so the emitted DOM was <table><tr>. <table> cannot contain a row directly: the HTML parser inserts an implied <tbody> when it parses server-rendered markup and React does not when it renders on the client, so anyone who copied the template into an app as a server-rendered page inherited a hydration mismatch in their own app. Client-only the DOM is still invalid — nothing reparents the rows, so the table ends up with <tr> children and no <tbody> at all, and any CSS or query aimed at tbody silently misses.

    The rows now sit in <TableBody>, the same element the data-driven data={...} path renders, so styling, dividers, and column widths are unchanged (#5278).

Other Changes

  • Public component theming vars are enumerable, and guarded against being documented but unsettable collectThemingVars joins collectThemingTargets as part of the one enumeration the theming surface is read from. Two guards ride on it: a documented public var no component reads compiles to a declaration that never applies, and a var the component writes inline outranks every cascade layer, so no theme can reach it. Both had shipped; neither is visible in the generated theme CSS the jsdom suites assert on (#5409).

... (truncated)

Commits
  • ea888ef release: v0.5.0 (#5435)
  • b6c0501 fix(cli): grouped-table template rendered rows outside a tbody (#5278)
  • 32d41f6 cli: include integration-contributed components in unified search/build (#5259)
  • 3c52d51 test(cli): guard public component theme vars against being documented but uns...
  • dfdd778 feat(core)!: Banner content is visible by default; collapse moves to a `colla...
  • 20bae6c docs: replace em dashes and curly quotes in CLI and component doc prose (#5354)
  • 42468a9 docs(cli): document the integration manifest docs field in the README (#5331)
  • 0b6762d feat(AspectRatio): responsive ratio — emit ratio as an overridable class-leve...
  • 1abeec7 fix(theme-neutral): Badge error label meets AA (#4446)
  • 789ef57 feat(cli): astryx theme targets — the themeable surface, enumerable in one ...
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.9 to 2.5.10

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.10

2.5.10

Patch Changes

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

    <div /* block comment */ class="something"></div>
    <Component /* c */ client:load />
  • #11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

  • #11438 3133ffa Thanks @​Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

    <div>{/* a note */}</div>
    <div class={/* a note */}>x</div>
  • #11403 8f7786f Thanks @​Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

    <div>{/* block comment */ x}</div>
    <div>{/* only a comment */}</div>
  • #11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

    <>
      <p>a</p>
    </>
  • #11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

    ---
    const a = "</script>";
    // </script> in a comment
    ---
  • #11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.10

Patch Changes

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

    <div /* block comment */ class="something"></div>
    <Component /* c */ client:load />
  • #11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

  • #11438 3133ffa Thanks @​Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

    <div>{/* a note */}</div>
    <div class={/* a note */}>x</div>
  • #11403 8f7786f Thanks @​Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

    <div>{/* block comment */ x}</div>
    <div>{/* only a comment */}</div>
  • #11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

    <>
      <p>a</p>
    </>
  • #11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

    ---
    const a = "</script>";
    // </script> in a comment
    ---
  • #11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

    <!-- c -->

... (truncated)

Commits

Updates @types/node from 26.2.0 to 26.4.0

Commits

Updates knip from 6.32.2 to 6.32.3

Release notes

Sourced from knip's releases.

Release 6.32.3

  • Update sentry production snapshot (9f18cba93c91de8554636b13692d6e7a937b7697)
  • Pin TypeScript ecosystem test (de5162952d223050f3135afb02d4e8de6d46f381)
  • Update query snapshot (f6964dd577d8f7967f9be6778f5c3953632e3c96)
  • fix(tsup): match config files with .cts and .mts extensions (#1938) (68d6f52f7913cfa1e36618e6b03f90734da34149) - thanks @​codeAnqiang-ma!
  • fix(lefthook): match all config file names and extensions (#1940) (4015ae0330c78e97360a2c8f697d17f82c5c24ae) - thanks @​codeAnqiang-ma!
  • fix(binaries): resolve missing pnpm subcommands (#1945) (deedbf69dcbd6a59d6705a72cadb4e40ad9c8029) - thanks @​marcalexiei!
  • Fix nested gitignore negation inside ignored dot-directories (#1913) (#1942) (0201641af48f52edfbe72076118944ee6273718e) - thanks @​DSeaStar!
  • fix(webdriver-io): match all supported config file extensions (#1948) (dc7aca5a865d1762a41dd97493b73398ec3abc19) - thanks @​solomonaustin!
  • Resolve vitest include patterns relative to test.dir (#1929) (ee555d227208dd6a34e002318bd6710dedb4d5ca) - thanks @​kirthi-b!
  • Change GitHub stars badge style to flat (#1967) (ff0d791e8130430524dc88c4df73ad87f82879f7) - thanks @​DreamLongYT!
  • Ignore printf as global binary (#1972) (a0c0b0805a8a26a6efdedfe2561b168da2a22b68) - thanks @​taracutie!
  • fix: add bun 1.4 dedupe subcommand (#1969) (d1d5d4276ece6daf2215f5ff3f4224b5b50dcac3) - thanks @​NimmLor!
  • Resolve Vitest mocks from test root (e655b0ba0192546a2688d702323c8e7c58fecde1)
  • Resolve local Vitest reporters from test root (resolve #1953) (f4ff31ad0385c5955627ec1b3bed2bc0000b14fe)
Commits
  • fc2733d Release knip@6.32.3
  • f4ff31a Resolve local Vitest reporters from test root (resolve #1953)
  • e655b0b Resolve Vitest mocks from test root
  • d1d5d42 fix: add bun 1.4 dedupe subcommand (#1969)
  • a0c0b08 Ignore printf as global binary (#1972)
  • ff0d791 Change GitHub stars badge style to flat (#1967)
  • ee555d2 Resolve vitest include patterns relative to test.dir (#1929)
  • dc7aca5 fix(webdriver-io): match all supported config file extensions (#1948)
  • 0201641 Fix nested gitignore negation inside ignored dot-directories (#1913) (#1942)
  • deedbf6 fix(binaries): resolve missing pnpm subcommands (#1945)
  • Additional commits viewable in compare view

Updates intl-messageformat from 11.2.12 to 11.2.14

Release notes

Sourced from intl-messageformat's releases.

intl-messageformat: 11.2.14

11.2.14 (2026-08-07)

What's Changed

... (truncated)

Commits
  • 629124f chore: release main (#6997)
  • 1c76864 chore(deps): update actions/stale action to v11 (#7011)
  • ca657be fix(deps): update dependency babel-plugin-formatjs to v13 (#7014)
  • b195fda fix(deps): update rust crate syn to v3 (#7017)
  • 4fe91fe feat(formatjs_intl): add extractable format_message macro (#7018)
  • 89749ca fix(formatjs_cli): fail on input resolution errors (#7005)
  • 61429d3 chore(deps): update dependency vite to v8.2.0 (#7007)
  • 6e356ac chore(deps): update dependency oxlint to v1.76.0 (#7003)
  • edfe9ec chore(deps): update dependency codescythe to ^0.10.0 (#7000)
  • 0795aad chore(deps): update dependency lucide-react to v1.28.0 (#7001)
  • Additional commits viewable in compare view

Updates @ai-sdk/anthropic from 4.0.40 to 4.0.44

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.44

Patch Changes

  • Updated dependencies [3e125ba]
    • @​ai-sdk/provider-utils@​5.0.32

4.0.43

Patch Changes

  • 7de3612: Encode provider-returned identifiers before using them in credentialed follow-up request paths.
  • a9782e1: fix: align batch result parsing, request counts, and lifecycle behavior across providers
  • 35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata
  • Updated dependencies [a9782e1]
  • Updated dependencies [35841f5]
  • Updated dependencies [d2f3353]
    • @​ai-sdk/provider-utils@​5.0.31

4.0.42

Patch Changes

  • 591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.
  • Updated dependencies [591d25b]
    • @​ai-sdk/provider@​4.0.8
    • @​ai-sdk/provider-utils@​5.0.30

4.0.41

Patch Changes

  • Updated dependencies [b74971f]
    • @​ai-sdk/provider-utils@​5.0.29
Commits
  • c93fa8d Version Packages (#19748)
  • a01c481 Version Packages (#19478)
  • 35841f5 feat: normalize mid-stream provider error events into public typed errors wit...
  • a9782e1 fix(batch): align result parsing, request counts, and behavior across provide...
  • 7de3612 fix: provider-returned IDs escaping credentialed follow-up URL path segments ...
  • 3d3afac Version Packages (#19362)
  • 591d25b feat: batch completion webhooks via startTextBatch webhookUrl (#19305)
  • ed857f5 Version Packages (#19296)
  • See full diff in compare view

Updates @ai-sdk/code-mode from 1.0.27 to 1.0.40

Release notes

Sourced from @​ai-sdk/code-mode's releases.

@​ai-sdk/open-responses@​1.0.39

Patch Changes

  • Updated dependencies [cc23556]
    • @​ai-sdk/provider-utils@​4.0.50

@​ai-sdk/harness-acp@​1.0.32

Patch Changes

  • 8961fde: feat(harness): allow changing model between turns via call options
  • Updated dependencies [8961fde]
  • Updated dependencies [eb59f2a]
    • @​ai-sdk/harness@​1.0.94
    • @​ai-sdk/provider-utils@​5.0.34

@​ai-sdk/harness-grok-build@​1.0.31

Patch Changes

  • 8961fde: feat(harness): allow changing model between turns via call options
  • Updated dependencies [8961fde]
  • Updated dependencies [eb59f2a]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 30, 2026
@github-actions github-actions Bot added the effort/S Under 100 readable lines label Aug 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-6ee950c6e8 branch from 15f565c to 10b033a Compare August 30, 2026 12:51

@hqhq1025 hqhq1025 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed exact head 10b033a068363b638c9e327ef015004a4733a8ca. I found two P1 blockers: the provider-utils bump makes every clean install fail because the repository patch is still versioned for 5.0.28, and the new dependency graph removes the root-hoisted @ai-sdk/provider that @maka/runtime imports directly. The required hosted checks currently fail on this head.\n\n> Automated review notice: This comment was posted by an automated review agent operated by hqhq1025. It is not an independent human review and does not replace one.

Comment thread package.json
"devDependencies": {
"@babel/parser": "7.29.7",
"@ai-sdk/provider-utils": "5.0.28",
"@ai-sdk/provider-utils": "5.0.32",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: Regenerate the required provider-utils patch for this version. A clean npm ci installs 5.0.32 and then fails in postinstall because patches/@ai-sdk+provider-utils+5.0.28.patch no longer applies. This patch is still required: the unpatched 5.0.32 build lacks the repository-added absentIfBlank behavior, and the CLI packaging check explicitly asserts that symbol. Please either regenerate and commit the patch for 5.0.32 while preserving its behavior, or keep provider-utils at the patched version.

"@ai-sdk/code-mode": "1.0.27",
"@ai-sdk/cohere": "4.0.28",
"@ai-sdk/google": "4.0.47",
"@ai-sdk/anthropic": "4.0.44",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: Declare the provider package that runtime imports directly. @maka/runtime imports types from @ai-sdk/provider (for example in src/model-factory.ts), but this manifest does not declare it. The old lockfile happened to hoist provider 4.0.7 to the root; this update installs provider 4.0.8 only under other packages. After bypassing the unrelated postinstall failure, npm run build:test now fails with TS2307: Cannot find module @ai-sdk/provider plus the resulting V4 type errors. Add the matching direct dependency and update the affected type fixtures/code for the new V4 shape.

…0 updates

Bumps the minor-and-patch group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/provider-utils](https://github.com/vercel/ai/tree/HEAD/packages/provider-utils) | `5.0.28` | `5.0.32` |
| [@astryxdesign/cli](https://github.com/facebook/astryx/tree/HEAD/packages/cli) | `0.4.5` | `0.5.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.9` | `2.5.10` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.32.3` |
| [intl-messageformat](https://github.com/formatjs/formatjs) | `11.2.12` | `11.2.14` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.40` | `4.0.44` |
| [@ai-sdk/code-mode](https://github.com/vercel/ai/tree/HEAD/packages/code-mode) | `1.0.27` | `1.0.40` |
| [@ai-sdk/cohere](https://github.com/vercel/ai/tree/HEAD/packages/cohere) | `4.0.28` | `4.0.33` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.47` | `4.0.55` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.44` | `4.0.50` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `3.0.32` | `3.0.39` |
| [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `8.0.0` | `8.1.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.70` | `7.0.83` |
| [@earendil-works/pi-tui](https://github.com/earendil-works/pi/tree/HEAD/packages/tui) | `0.84.2` | `0.84.3` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.4` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.33.0` | `1.34.0` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.0` | `11.17.2` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` |
| [@jackwener/opencli](https://github.com/jackwener/opencli) | `1.8.6` | `1.8.7` |



Updates `@ai-sdk/provider-utils` from 5.0.28 to 5.0.32
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/provider-utils/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider-utils@5.0.32/packages/provider-utils)

Updates `@astryxdesign/cli` from 0.4.5 to 0.5.0
- [Release notes](https://github.com/facebook/astryx/releases)
- [Changelog](https://github.com/facebook/astryx/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/facebook/astryx/commits/v0.5.0/packages/cli)

Updates `@biomejs/biome` from 2.5.9 to 2.5.10
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.10/packages/@biomejs/biome)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `knip` from 6.32.2 to 6.32.3
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.3/packages/knip)

Updates `intl-messageformat` from 11.2.12 to 11.2.14
- [Release notes](https://github.com/formatjs/formatjs/releases)
- [Commits](https://github.com/formatjs/formatjs/compare/intl-messageformat@11.2.12...intl-messageformat@11.2.14)

Updates `@ai-sdk/anthropic` from 4.0.40 to 4.0.44
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.44/packages/anthropic)

Updates `@ai-sdk/code-mode` from 1.0.27 to 1.0.40
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/code-mode/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/code-mode@1.0.40/packages/code-mode)

Updates `@ai-sdk/cohere` from 4.0.28 to 4.0.33
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/cohere/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/cohere@4.0.33/packages/cohere)

Updates `@ai-sdk/google` from 4.0.47 to 4.0.55
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.55/packages/google)

Updates `@ai-sdk/openai` from 4.0.44 to 4.0.50
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.50/packages/openai)

Updates `@ai-sdk/openai-compatible` from 3.0.32 to 3.0.39
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.39/packages/openai-compatible)

Updates `@slack/web-api` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@8.0.0...@slack/web-api@8.1.0)

Updates `ai` from 7.0.70 to 7.0.83
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.83/packages/ai)

Updates `@earendil-works/pi-tui` from 0.84.2 to 0.84.3
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/tui/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.84.3/packages/tui)

Updates `katex` from 0.16.47 to 0.18.4
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.18.4)

Updates `lucide-react` from 1.33.0 to 1.34.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.34.0/packages/lucide-react)

Updates `mermaid` from 11.17.0 to 11.17.2
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.0...mermaid@11.17.2)

Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@jackwener/opencli` from 1.8.6 to 1.8.7
- [Release notes](https://github.com/jackwener/opencli/releases)
- [Changelog](https://github.com/jackwener/OpenCLI/blob/main/CHANGELOG.md)
- [Commits](jackwener/OpenCLI@v1.8.6...v1.8.7)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/code-mode"
  dependency-version: 1.0.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/cohere"
  dependency-version: 4.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 3.0.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/provider-utils"
  dependency-version: 5.0.32
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@astryxdesign/cli"
  dependency-version: 0.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@earendil-works/pi-tui"
  dependency-version: 0.84.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@jackwener/opencli"
  dependency-version: 1.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@slack/web-api"
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ai
  dependency-version: 7.0.83
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: intl-messageformat
  dependency-version: 11.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: katex
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: knip
  dependency-version: 6.32.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mermaid
  dependency-version: 11.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-6ee950c6e8 branch from 10b033a to 59e2a11 Compare August 30, 2026 17:56

@hqhq1025 hqhq1025 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-reviewed exact head 59e2a112033d9887a9ef074020c7343e9b7e7b1d after the rebase. The two existing P1 blockers still apply on this head:

  1. package.json:104 upgrades @ai-sdk/provider-utils to 5.0.32 while the repository still ships patches/@ai-sdk+provider-utils+5.0.28.patch. A clean npm ci fails in postinstall, and the hosted CI and immutable-tarball jobs fail for the same reason. The unpatched 5.0.32 artifact still lacks the absentIfBlank behavior required by scripts/release-cli-package.mjs:749.
  2. packages/runtime/package.json:125-156 still does not declare @ai-sdk/provider, although runtime sources import it directly. The updated lockfile nests 4.0.8 below other packages rather than installing it at the workspace root; npm run build:test therefore fails with TS2307 at packages/runtime/src/model-factory.ts:36 and the affected test files, followed by V4 fixture type errors.

Lint, format checking, Core/UI typechecks, git diff --check, and a clean merge-tree against current main passed. The remaining dependency updates cannot receive complete integrated validation until installation and runtime compilation succeed.

Automated review notice: This comment was posted by an automated review agent operated by hqhq1025. It is not an independent human review and does not replace one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file effort/S Under 100 readable lines javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant